topic Re: Blocked Incoming Non-IP Protocol : 0x886d Constantly Showing up in Host Intrusion Prevention (Host IPS)https://community.mcafee.com/t5/Host-Intrusion-Prevention-Host/Blocked-Incoming-Non-IP-Protocol-0x886d-Constantly-Showing-up/m-p/466993#M4594
<HTML><HEAD></HEAD><BODY><P>I have checked more and we don't have such option in HIPS for not to log specific firewall events in activity log.</P></BODY></HTML>Mon, 18 Aug 2014 07:57:02 GMTansarias2014-08-18T07:57:02ZBlocked Incoming Non-IP Protocol : 0x886d Constantly Showing uphttps://community.mcafee.com/t5/Host-Intrusion-Prevention-Host/Blocked-Incoming-Non-IP-Protocol-0x886d-Constantly-Showing-up/m-p/466988#M4589
<HTML><HEAD></HEAD><BODY><P>I keep seeing Blocked Incoming Non-IP Protocol : 0x886d in the Activity Log. I have turned the box checked for unsupported protocols, but this is still showing up and shows up quite frequently.&nbsp; Has anyone figured out how to make this go away?</P></BODY></HTML>Mon, 18 Aug 2014 06:39:14 GMThttps://community.mcafee.com/t5/Host-Intrusion-Prevention-Host/Blocked-Incoming-Non-IP-Protocol-0x886d-Constantly-Showing-up/m-p/466988#M4589rocmook22014-08-18T06:39:14ZRe: Blocked Incoming Non-IP Protocol : 0x886d Constantly Showing uphttps://community.mcafee.com/t5/Host-Intrusion-Prevention-Host/Blocked-Incoming-Non-IP-Protocol-0x886d-Constantly-Showing-up/m-p/466989#M4590
<HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>Did you get application name which is responsible for these traffic? If yes than add into trusted application and it will not come.</P><P>If not than add into firewall Non-IP Protocol rule, refer below screen shot :</P><P></P><P><IMG alt="ScreenHunter_01 Aug. 18 12.18.jpg" class="jive-image image-1" src="/legacyfs/online/70483_ScreenHunter_01 Aug. 18 12.18.jpg" style="width: 620px; height: 270px;" /></P><P></P><P>Let me know if it resolve the issue.</P></BODY></HTML>Mon, 18 Aug 2014 06:50:15 GMThttps://community.mcafee.com/t5/Host-Intrusion-Prevention-Host/Blocked-Incoming-Non-IP-Protocol-0x886d-Constantly-Showing-up/m-p/466989#M4590ansarias2014-08-18T06:50:15ZRe: Blocked Incoming Non-IP Protocol : 0x886d Constantly Showing uphttps://community.mcafee.com/t5/Host-Intrusion-Prevention-Host/Blocked-Incoming-Non-IP-Protocol-0x886d-Constantly-Showing-up/m-p/466990#M4591
<HTML><HEAD></HEAD><BODY><P>I created that rule already and now I see it show allow over and over again. There is no application being shown.&nbsp; It is just very odd that this is happening.</P></BODY></HTML>Mon, 18 Aug 2014 06:54:45 GMThttps://community.mcafee.com/t5/Host-Intrusion-Prevention-Host/Blocked-Incoming-Non-IP-Protocol-0x886d-Constantly-Showing-up/m-p/466990#M4591rocmook22014-08-18T06:54:45ZRe: Blocked Incoming Non-IP Protocol : 0x886d Constantly Showing uphttps://community.mcafee.com/t5/Host-Intrusion-Prevention-Host/Blocked-Incoming-Non-IP-Protocol-0x886d-Constantly-Showing-up/m-p/466991#M4592
<HTML><HEAD></HEAD><BODY><P>Try to check the option <STRONG>Allow traffic for unsupported protocols </STRONG>under Firewall Options and see if logs captured in activity log or not.</P></BODY></HTML>Mon, 18 Aug 2014 07:30:01 GMThttps://community.mcafee.com/t5/Host-Intrusion-Prevention-Host/Blocked-Incoming-Non-IP-Protocol-0x886d-Constantly-Showing-up/m-p/466991#M4592ansarias2014-08-18T07:30:01ZRe: Blocked Incoming Non-IP Protocol : 0x886d Constantly Showing uphttps://community.mcafee.com/t5/Host-Intrusion-Prevention-Host/Blocked-Incoming-Non-IP-Protocol-0x886d-Constantly-Showing-up/m-p/466992#M4593
<HTML><HEAD></HEAD><BODY><P>I already had that checked. I did figure something out, the problem is coming from INTEL Nic's. I have to work with the server team to figure out the rest of the problem.&nbsp; Though I am confused on why having Allow traffic for unsupported protocols checked is still logging this traffic and not just passing the traffic without showing it in the Activity Log.</P></BODY></HTML>Mon, 18 Aug 2014 07:35:05 GMThttps://community.mcafee.com/t5/Host-Intrusion-Prevention-Host/Blocked-Incoming-Non-IP-Protocol-0x886d-Constantly-Showing-up/m-p/466992#M4593rocmook22014-08-18T07:35:05ZRe: Blocked Incoming Non-IP Protocol : 0x886d Constantly Showing uphttps://community.mcafee.com/t5/Host-Intrusion-Prevention-Host/Blocked-Incoming-Non-IP-Protocol-0x886d-Constantly-Showing-up/m-p/466993#M4594
<HTML><HEAD></HEAD><BODY><P>I have checked more and we don't have such option in HIPS for not to log specific firewall events in activity log.</P></BODY></HTML>Mon, 18 Aug 2014 07:57:02 GMThttps://community.mcafee.com/t5/Host-Intrusion-Prevention-Host/Blocked-Incoming-Non-IP-Protocol-0x886d-Constantly-Showing-up/m-p/466993#M4594ansarias2014-08-18T07:57:02Z